This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft File: wPQvc_8rzEiFsSAL0C7n4p9gjis.mft (raw, json) Hash identifier: JzD0iYe8trFhsplKcQdwKcSoyuKehdBzqYchAbRNAEo= Subject key identifier: A4:67:AA:9E:06:B1:78:16:3D:17:F7:25:0F:FB:D9:40:72:14:D8:95 Authority key identifier: C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B Certificate issuer: /CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b Certificate serial: 019B44A5A01EA662EC0ACC4B3962CA3383AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft Manifest number: 0205 Signing time: Mon 22 Dec 2025 06:01:03 +0000 Manifest this update: Mon 22 Dec 2025 06:01:03 +0000 Manifest next update: Tue 23 Dec 2025 06:01:03 +0000 Files and hashes: 1: DhYlOELQmejsuqE0q-lFm-NVMP0.roa (hash: mf0P0l64vNrzlnAnRIlTkqO53r1pyoZwPlURmjISdFU=) 2: S0h9COCL9yDPAz3dul4Z5VK_88Q.roa (hash: xAF8HzsYzOEotQ+1gvdFYGccAU/IelrIejunqeu7D98=) 3: wPQvc_8rzEiFsSAL0C7n4p9gjis.crl (hash: iiUfQxpGnjxzShyf5FCoS1IIPJ1oS0Ne4iUSa0Nc6g8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:a0:1e:a6:62:ec:0a:cc:4b:39:62:ca:33:83:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b Validity Not Before: Dec 22 06:01:03 2025 GMT Not After : Dec 23 06:01:03 2025 GMT Subject: CN=a467aa9e06b178163d17f7250ffbd9407214d895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f5:08:bc:8e:b7:65:32:aa:1d:f8:6b:51:f6: e2:63:f6:f5:c6:89:45:f6:e4:87:df:33:b2:98:fe: 25:22:af:40:0c:0e:7d:c5:e6:52:6a:83:c6:db:4d: 49:14:72:88:a3:2b:48:f4:db:97:e3:0e:4d:59:d8: c9:7a:ff:d9:b6:c2:52:a7:fe:52:78:37:02:1d:6d: e7:54:46:2c:e7:8a:ea:ed:0e:33:14:27:f3:ab:29: d4:79:d6:28:a0:81:51:5d:d4:e2:70:65:b8:79:59: 9d:c4:51:7f:74:55:24:41:e8:95:69:70:fb:a8:89: bf:0e:69:ec:36:1a:62:56:4f:a6:00:fd:c3:aa:5d: 40:1f:03:0c:1d:51:07:8f:94:dd:38:5c:f6:be:71: 3f:ab:f7:a3:af:3a:8e:c3:93:64:de:d4:25:14:35: 23:52:29:40:50:12:77:55:4a:f8:60:41:f7:f6:89: a1:0b:ba:bd:1d:68:c5:99:c2:81:59:e4:60:ad:4d: 7d:35:f9:6f:37:e1:e7:3e:fd:60:8a:39:26:07:9d: a1:2f:0a:41:67:cf:02:51:e3:f5:ff:96:0a:eb:f2: 72:5f:e0:b5:64:3c:78:3d:90:cf:ab:01:eb:b9:36: 1f:35:57:3f:12:ff:5a:be:f1:65:48:3f:f5:9e:1a: c7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:67:AA:9E:06:B1:78:16:3D:17:F7:25:0F:FB:D9:40:72:14:D8:95 X509v3 Authority Key Identifier: keyid:C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:24:73:22:1b:c0:cf:22:2e:b5:d1:79:90:9c:9f:20:b3:6b: c0:28:f1:63:df:0e:f2:1d:07:5d:57:c9:4d:c3:2b:22:f4:36: 21:d9:a3:78:a6:7e:cb:4d:27:90:95:e1:ad:f1:d6:47:a8:08: 85:0e:d1:1c:f4:d5:be:7b:8a:1d:e8:e3:6d:59:f4:15:df:de: 55:18:11:f5:f4:86:99:d3:96:32:6e:00:42:43:05:5c:27:b8: d1:bb:0e:25:c7:51:2f:74:ac:0a:4c:77:87:11:15:71:ca:65: 5e:39:e8:12:a8:68:61:24:3a:b7:dc:ba:85:1e:7c:f6:49:2d: 1f:e0:ff:98:5c:fc:fc:77:5d:fc:13:df:cb:70:bf:49:f7:b0: 86:51:47:27:d1:ee:28:37:c7:b6:4a:b5:20:48:dc:3f:7a:7a: 25:b7:a5:37:24:1d:e9:fc:f3:00:18:46:51:0d:50:27:64:d2: 71:76:0e:dc:4d:ab:cb:8d:cf:ab:3e:69:c6:b5:09:2e:5a:e0: 11:6d:69:8f:50:f2:66:6f:d6:ac:c8:6d:75:00:8f:f1:bd:a2: 78:49:03:c4:75:ab:d9:0e:59:cb:6e:44:0b:4c:4a:05:2f:40: e4:8a:dc:32:3a:fe:49:30:4e:7f:81:85:5e:cf:58:c7:2f:39: 36:68:48:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpaAepmLsCsxLOWLKM4OtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjQyZjczZmYyYmNjNDg4NWIxMjAwYmQwMmVlN2UyOWY2 MDhlMmIwHhcNMjUxMjIyMDYwMTAzWhcNMjUxMjIzMDYwMTAzWjAzMTEwLwYDVQQD EyhhNDY3YWE5ZTA2YjE3ODE2M2QxN2Y3MjUwZmZiZDk0MDcyMTRkODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPUIvI63ZTKqHfhrUfbiY/b1xolF 9uSH3zOymP4lIq9ADA59xeZSaoPG201JFHKIoytI9NuX4w5NWdjJev/ZtsJSp/5S eDcCHW3nVEYs54rq7Q4zFCfzqynUedYooIFRXdTicGW4eVmdxFF/dFUkQeiVaXD7 qIm/DmnsNhpiVk+mAP3Dql1AHwMMHVEHj5TdOFz2vnE/q/ejrzqOw5Nk3tQlFDUj UilAUBJ3VUr4YEH39omhC7q9HWjFmcKBWeRgrU19NflvN+HnPv1gijkmB52hLwpB Z88CUeP1/5YK6/JyX+C1ZDx4PZDPqwHruTYfNVc/Ev9avvFlSD/1nhrHawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRnqp4GsXgWPRf3JQ/72UByFNiVMB8GA1UdIwQY MBaAFMD0L3P/K8xIhbEgC9Au5+KfYI4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81OWY4OTUtNWM1MC00MzZhLTk3MDct N2RkNTdlNzM2NzQ2LzEvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81OWY4OTUtNWM1MC00MzZhLTk3MDctN2RkNTdlNzM2NzQ2 LzEvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSRzIhvA zyIutdF5kJyfILNrwCjxY98O8h0HXVfJTcMrIvQ2IdmjeKZ+y00nkJXhrfHWR6gI hQ7RHPTVvnuKHejjbVn0Fd/eVRgR9fSGmdOWMm4AQkMFXCe40bsOJcdRL3SsCkx3 hxEVccplXjnoEqhoYSQ6t9y6hR589kktH+D/mFz8/Hdd/BPfy3C/SfewhlFHJ9Hu KDfHtkq1IEjcP3p6JbelNyQd6fzzABhGUQ1QJ2TScXYO3E2ry43Pqz5pxrUJLlrg EW1pj1DyZm/WrMhtdQCP8b2ieEkDxHWr2Q5Zy25EC0xKBS9A5IrcMjr+STBOf4GF Xs9Yxy85NmhISw== -----END CERTIFICATE-----Generated at Mon Dec 22 12:05:09 2025 by rpki-client